Slashdot Mirror

And how does the TPM chip know that the information that the bios/os loader/os itself sends to it is actually the real information about the bios/os loader/os and not faked information from an unmodified version?

This happens via a staged-boot process.

The BIOS itself in a TPM computer has a non-flashable portion that runs at startup. This takes a hash of the rest of the BIOS and feeds it into the TPM. The BIOS then hashes the boot loader into the TPM (Grub, in the case of Linux) before transferring control to it. The boot loader can hash the OS before switching control to that. The Trusted Grub project on Linux has been enhanced to do this. Then you could have the OS hash application data into the TPM as it loads; so far only a few experimental projects do that, like Enforcer.

Now, the BIOS is hard-wired to tell the truth. But the later components could lie. You could have a patched boot loader (it's open source!) which does not send truthful data about the OS kernel and configuration to the TPM.

But you couldn't get away with this fraud. Recall that the BIOS hashes the boot loader and sends the data to the TPM before running it. If you patch Trusted Grub to lie, it will have a different hash, and the TPM will be told about it. (Note, the TPM doesn't have any "expectations" regarding what these hashes are supposed to be, it just remembers what it was told and can report it later, signed with a crypto key.) So with this concept, if someone knows what the system "fingerprint" is supposed to be of a secure BIOS + Trusted Grub + Enforcer Linux boot sequence, it's impossible for you to patch it and end up with that same exact pattern.

Linux is a kernel. GNU/Linux on the other hand, is an operating system. There's a project dedicated to OSS projects for Windows... OSSwin Project.

It's possible to record anything coming off the system-wide wave out device using the excellent open source and cross-platform Audacity http://audacity.sourceforge.net/. Audacity will also allow you to edit the recording—including removal of noise.

--
"When you see one of your old ones trip and fall down, do you not point and laugh, just as we on Earth do?"

Sourceforge has the occasional problem (CVS stats has been broken for how long now?), but basically it a fantastic site for open source, and easily provides all the services that any OSS project of any size needs in order to function and flourish.

Except for:

1. Broken mailing lists. They've butchered Mailman beyond functionality, by removing the ability to get the project emails in SMTP format, no archive (mbox) downloads to read offline, broken signup and preference retrieval.
2. Broken bug tracking. No email accountability when bugs are updated, no escalation and priority, other issues.
3. Crippled CVS repositories. No branches, no proper deletion of files, no ownership changes of directories, no ACLs. They "crippled" it in the name of security, because they didn't know how to secure it in the first place. Its down more than its up.
4. Controlling hosting policies. If you decide to move your project elsewhere, they outright REFUSE to remove the entry from Sourceforge, because they claim they want to be sure the code is still available to someone. Not only is this confusing, its downright WRONG (morally and ethically). See my own project as an example. I haven't had code up there, ever, in over 6-7 years now, and the project page still lives on, confusing users every day.

Why not instead lend a hand to GemRB effort? http://gemrb.sourceforge.net/ . You could create a new Planescape game for GemRB engine :-)

Ooh, interesting! Thanks for that link, I will defenitely take a look. I'm not much of a C++ or Python programmer (Java and Ruby are more my forte), but perhaps I can learn...

Not to dissgree with you on the stinking part, but you can link to a download ... like this:
http://prdownloads.sourceforge.net/myproject/mypro ject-0.10.tar.gz?download

Why not instead lend a hand to GemRB effort? http://gemrb.sourceforge.net/ . You could create a new Planescape game for GemRB engine :-)

I consider Planescape: Torment the best ever game too. Ravel's question mentioned above or the moment when I found out that NO's previous incarnation pretended loving Deionarra to use her as a sacrifice.... Dark and heart tearing

Edheldil

these stacks might involve a GPL shim and a non-GPL binary that's checked and verified by the TPM

No, the main one is TrouSerS. It's fully open source and GPL'd. Contrary to the many lies which have been circulated about it, TC is fully compatible with Linux. In fact, that's where most of the research and development work is at this time. Trusted Grub is another good example. It hashes the Linux kernel and some of the config files into the TPM chip before booting it. This way Linux systems can prove what kernel they booted.

these stacks might involve a GPL shim and a non-GPL binary that's checked and verified by the TPM

No, the main one is TrouSerS. It's fully open source and GPL'd. Contrary to the many lies which have been circulated about it, TC is fully compatible with Linux. In fact, that's where most of the research and development work is at this time. Trusted Grub is another good example. It hashes the Linux kernel and some of the config files into the TPM chip before booting it. This way Linux systems can prove what kernel they booted.

I just searched for the first word I saw when I went to sf.net: "antivirus".

Why is "Moon Secure Antivirus", with rank at 28,000, no files, 0 downloads, registered this year, and only 82% activity considered more relevant than ClamAV?

That's just not helpful! I'd rather not see something that has zero downloads but has more occurances of "antivirus" in the description (or whatever contributed to the relevancy score).

Yes, I can change the sort order. But why make me jump through hoops to wade throug these low-quality projects?

skype-rec works great.

Wasn't Chris DiBona at SourceForge prior to Google? It's nice to see those non-compete agreements are not enforced. Good thing he didn't work for Microsoft, or he'd get a chair in the head. ;)

Audacity has a noise removal effect that was able to remove a really horrible hiss after a hybrid decided to stop behaving before an interview (shameless plug for University Radio Hilo). It takes a sample segment that should be the noise by itself and can then be applied to the rest of the file. It won't improve the source quality, but it might help with the hiss, especially if it's really constant.

You could use the noise reduction filter in something like Audacity. You highlight a section of the file that has no talking to take a profile of the noise. Then apply to the entire file.

On the topic of mind mapping software, I always take a copy of Freemind with me wherever I go. It's simple, quick and open source.

The enterprise version was rewritten from scratch in Java about 4 years ago. You can get a 15 user VMWare image version of it for free here: http://sourceforge.net/powerbar/sfee/

Just a clarification, since it doesn't address your core issue, as sf.net doesn't use the enterprise code.

What if my Post Traumatic Stress was caused by video games?

Actually I found any game I played too much of could really mess me up for a few days. Muds were terrible for going around unconciously assessing what level people were and how many experience and gold I could get if I snuffed 'em.

Now I stick to simple strategy games which only give me unconscious reflexive behaviour to want real estate in bright, shiny primary colours.

"oh, blue! want that!" "hmm the intersection of ocean and water looks like a good place to harvest wool, wheat and wood"

I'd probably have post traumatic stress if I even came close to one of these

Well, at least somebody finally got around to this.

Maybe the massive difference is that this thing ties into people's online identities in ways that MS passport could only have dreamed of. I suspect the focus will be on improving interactions between relatively seperated developers and new end users. Compare Google's "new bug" submission vs SourceForge's, or the default bugzilla mess (and associated identity tracking nightmare).

Perhaps they'll make it easier to download stuff from than Sourceforge. Maybe it's me, but a `download` button should let you download something, not show you some of the contents of what a working system would let you download.

At random, look at this project:

http://sourceforge.net/projects/ftimes/

You click on download...but you get taken off to some other page where you can download, seperately, some of the source files.

I still have a copy of the Bnetd source code lying around, if you're interested.

Maxima is a decent package.See http://maxima.sourceforge.net/

• freenet (an anonymous file-publishing system)
• MixMaster (an anonymous e-mail system)
• Tor (an anonymous TCP-socket origination system)

• freenet (an anonymous file-publishing system)
• MixMaster (an anonymous e-mail system)
• Tor (an anonymous TCP-socket origination system)

They're great fonts, but they're under the GPL, so the scientists could have just downloaded them ?:(

http://dejavu.sourceforge.net/wiki/index.php/Main_ Page

Seeing as you replied twice, here's my second reply: heard of Qt#? Most Linux distros won't even bundle mono from irrational fears of microsoft anyway.

I started out using Fink but it never felt quite right. Then I tried DarwinPorts and I've been happy ever since. As a result, when I saw this story my first thought was, "What will happen to DarinPorts?" I checked the Darwinports Mailing List Archive and found this comforting post. To summarize, DarwinPorts is alive and well and will continue. Time to start using www.darwinports.org rather than www.opendarwin.org.

You could consult here:
http://www.tldp.org/HOWTO/Hardware-HOWTO/nic.html

Or here:
http://linux-atm.sourceforge.net/

But I guess networking professionals can't really Goggle for "linux ATM".

So they don't think iptables and iproute2 are networking?
Did they not notice:

http://leaf.sourceforge.net/

That would be like a new linux distribution saying they're
bringing the Dawn of the Linux Desktop.. complete JOKE!

Pardon me if I missed seeing a reference to the PLOT10 library in this discussion. Used to be THE lib for TEKTRONIX terminals (line perinter then color CRT) for graphics anything. Wrote some stuff for plots in C and fortran for data surfaces way back (Z80 CP/M, and later IBM PC), as it was ported as a general purpose lib, to graph on a flat bed pen plotter and CRT (Hercules monochrome graphics adapter). Also, I seem to recall a few geeks simulation Rubik's Cube and Enterprise (Dammit Jim, the Original Series!) on a Tektronix Color CRT when I was a wee lad in college (pre IBM PC). You should be able to google for the source or for a compatible port.

http://www.gaeinc.com/plot10.htm
http://www.cvrti.utah.edu/~macleod/docs/pscont.htm l
http://www.ill.fr/Computing/pgplotSS.html

and then there's http://plplot.sourceforge.net/ as well. (includs the classic "Lena" demo pic)
I've got some code here somwhere's....hmm.....now what did I do with those 8 inch floppies and drive.....
--
"The most exciting phrase to hear in science, the one that heralds new discoveries, is not 'Eureka!' (I found it!) but 'That's funny...'" -Isaac Asimov

Sadly, the name doesn't appear to exist in Celestia, so I can't easily travel to it to check it out.

It's a problem of the Windows platform. Whose fault it is is irrelevant, and of course MS doesn't care.

Wow. That's some logic you have there. Let me give you a hint: they don't control the 3rd party vendors that build software for their platform. Those vendors, just like you or MS, can choose to license their software anyway they want. Of course its not like there is any open source software for Windows is there?

It's the problem of users and developers.

Users don't care, nor could they do anything, with the source or API. So its not a problem for them. Developers may or may not care, but given the number of developers building software for Windows, I'd wage a non-trival amount of developers don't care either. Indeed, I don't care what most of the APIs or source are for the OS on which I'm building.

And in remaining cases it's essential.

Really? Who's employeed in a job where its ESSENTIAL they have that access? Well, there are MS employees, but that's a rather duh answer. Funny, I don't see anyone sitting there about to lose their job because they can't get to the info they need.

If you need to replace the stack, it means the original wasn't good enough for your job. Replacing is likely overwriting some DLLs, easy. Now for -writing- these DLLs (from scratch)...

If its not doing what you need, its unlikely that a few small code tweaks would fix you problem either. Couldn't you just take some open source Linux stuff and use that as a base as well? In most cases you wouldn't be starting 'completely from sractch' unless you wanted. Believe it or not you can control the network stack on windows to tweak it. It may not be immediately obvious, but I believe it mostly involves some registry changes.

We're not talking about faults/guilty but about problems. Not all evils of this world are made in Richmond.

Who's in Richmond? Your talking about niche problems, and from your previous posts it very much seems like you're blaming MS.

In Windows you have a binary driver.

There's actually very few APIs which are undocumented, or for which you cannot find the documentation. After all, SOMEBODY made that driver, and they didn't do it by guessing.

The problem is writing the actual content of this plugin, for example rewriting a major component of the system from scratch instead of changing a single ++ to -- in the code, because you can't change a part this small, a single function, you need to replace whole library.

You're making something up to support your case. I doubt there's a library out there when the ONLY change you need is to change a ++ to a --. Your argument here is weak.

Even though the actual system interaction part is adding a few header files in your Visual Studio project, then implementing 2-3 interfaces, the actual task of recreating the whole overriden component may be beyond your reach. You can't create such a plugin. You could modify the code if you had access to it.

If you can't build the entire piece you need on your own, I doubt you have the skill necessary to tweak the existing code without creating other side effects since you likely don't understand it as proven by the fact you couldn't recreate it on your own.

It's about as easy to solder in a matching socket into a circuit board and maybe add some glue logic, to make it plug into the other part, as to create a template document for a plugin module. Now what you place inside the plugin module or what is that circuit board composed of, is a different thing - not entirely related to what they plug into.

Soldering is already more difficult than typing on a keyboard. I don't know many electronics where you can just 'plug in' any old chip you want. Even with processors, they have to be a certain socket specification, and the different chips are much more similar than they are different.

The article doesn't say this, but TV Raman is himself blind and author of emacspeak.

I have spent almost a year working on a project that is nearly identical to (if less mature than) YouOS. Atomic OS is not as advanced as YouOS due to lack of hackers and poor timing.

This is driving me nuts. I logged into /. went through the headlines, then posted an article about Atomic OS. When I got back to the developers headlines... Boom. YouOS.

Aaaarghh!

The second sentence is interesting in its own right. I, for one, cannot interpret it to mean anything but inventing their own, new standard instead of the ones that already exist and work.

You can use GPUTILS to program PICs from Linux. A better option would be to switch to using AVRs (just as cheap, but far more capable) and use gcc, with your code in C. You can google for introductions to using gcc with the AVR.

http://gaim-encryption.sourceforge.net/

Have a look at Matlab's compiler -- it used to generate decent C++ code when I looked at it a few years back. And there are alternatives to matlab, including freemat, a free matlab clone, and numpy, a numerical python extension. Neither will be plug-and-play but they are both close enough to potentially be worth the switch in the future.

Have a look at Matlab's compiler -- it used to generate decent C++ code when I looked at it a few years back. And there are alternatives to matlab, including freemat, a free matlab clone, and numpy, a numerical python extension. Neither will be plug-and-play but they are both close enough to potentially be worth the switch in the future.

The Mac should be able to find printers shared with SMB. Otherwise take a look at sharing the printer as LPR on your PC, and then using the "Printer Setup Utility" to access it.

A quick look seems to indicate that this is a GDI based printer, and therefore does not support Postscript. For this reason I took a look for "CUP" & "GDI" and came up with this:

http://www.linuxprinting.org/macosx/samsung-gdi/

Another possibility, lookimg for "ML-1710" and "OS X", was this:

http://printers.free-driver-download.com/Samsung/1 4085/Samsung-ML-1710-Printer-Driver-Mac-OS-X-10.3. html
http://gimp-print.sourceforge.net/MacOSX.php3

Let me know if you get it working.

A somewhat related issue is using a Wiki to prepare contents for a book. I believe that there is lot of future in this since writing is more difficult than formatting, and using a wiki helps to organize ideas and collaborative work (testing it right now).

Now, for MediaWikis there is a sort of procedure. The German Wikipedia community seems to have the best experience so far and some reader really have been published in paper form.

WikiReader Handbuch and a Magnus' magic MediaWiki-to-XML-to-stuff converter

Btw there is also the idea that one could some day directly produce PDF from Wiki. A script for print on demand is on source forge .

Maybe a ./ reader went through the experience making a book from Wiki and could tell us how it went ...

True, Microsoft uses Sourceforge, as their open source efforts aren't done to either fufil legal requirements (as in Webkit) or as not-overly-serious publicity stunt (as in Darwin)

Would you care to look back to see how many open source projects still in alpha get coverage here?

That's probably because it seems to me that 90% or more of the open source stuff out there never makes it past the pre-alpha stage - so alphas are progress, betas are pseudo-miracles and release code is almost non-existent. [*]

Here's an example, (for a project I want to find time and money to work on):
http://sourceforge.net/projects/iscsitarget/ - iSCSI target software for Linux. 5 years old; still beta but few updates. I just don't have the skills to contribute code; contributing bugs etc is of limited value if no-one can fix the code.

* Look, obviously the successful projects do follow good practices and achieve good releases - the Linux kernel, Firefox/Mozilla et al, and so forth. I'm just saying there's a mountain of code out there that no-one wants to touch, the originator doesn't care about any more and it's shoved onto sourceforge as an OSS project so that someone else can do something with it.

http://www.dosgamesonline.com/index/game/StarTrek/ 496

I highly recomend an update.

http://wcuniverse.sourceforge.net/vegatrek/index.h tml

Yeah, you would think that. By all means, go track down a copy of the Famicom Disk with a suitable emulator. I'll even help you out. The disk image was linked in an earlier comment comparing the two games side by side and a decent emulator capable of playing the image would be FCE Ultra which is multi platform. Enjoy.

Just don't get your hopes up though. While it's nice to actually play an odd piece of history, you'll be left scratching your head wondering why NOJ (yes, Nintendo of Japan) thought that this would be the game to release as Super Mario 2 in the rest of the world.

Don't get me wrong, I love SMB2; it's one of my all time favorite games. Trust me, I've played quite a few good games in my lifetime and this is a definite recommendation; I even like it more than Mario 3! It's almost as if Miyamoto and the rest of the team saw YKDDP and thought that there was some great promise in it if only it was polished a bit more. While this discussion is about how absorbing YKDDP in to the Mario universe forever changed Mario and other platform games (arguably for the better), you've also got to realize that it changed YKDDP.

Yume Kojou Doki Doki Panic on its own is OK but it feels like an unfinished beta. It's like comparing Sonic Crackers to Knuckles' Chaotix. Maybe that analogy isn't exactly fair because Crackers was a beta but Chaotix wasn't exactly the best game either. :) It did have the "Door Into Summer" tune so we can forgive it a bit.

Recently, he stole code from the IE7 sourceforge project (check his changelog), but it still doesn't do PNG in backgrounds. So lame.

Dzongkha Version of Debian GNU/Linux 3.1 launched

The Information and Communication minister of the Royal Government of
Bhutan, Lyonpo Leki Dorji, launched "DzongkhaLinux", an entirely
localised GNU/Linux distribution based on Debian GNU/Linux 3.1. This
is the first operating system that fully supports the country's
national language and which has been developed in Bhutan.

The Bhutan Department of Information Technology chose Debian for its
high versatility and reliability as well as the guarantee to always
remain 100% Free Software. DzongkhaLinux developers have already
contributed back their translations and development (fonts, input
methods...) to both Debian and end-user applications, such as GNOME,
OpenOffice.org and the Mozilla.

The development of DzongkhaLinux was supported by the International
Development Research Center, from Canada, and the PANl10n project,
aimed at bringing localised computer use in several Asian countries.
The system consists of one CD which can be either installed or used as
a live system.

Recent laws in the country have enforced the use of the national
language in all official events and all official communication.
DzongkhaLinux is the first opportunity for the entire Bhutanese
population to join the information and communication age, using their
own language.


About Bhutan

The Kingdom of Bhutan is a landlocked South Asian nation situated
between India, Tibet and China and is often described as the last
surviving traditional Himalayan Buddhist culture. The official
language is Dzongkha, a language from the Sino-Tibetan family. Bhutan
is very committed to preserve its local culture and traditions.


About Debian

Debian GNU/Linux is a free operating system, developed by more than a
thousand volunteers from all over the world who collaborate via the
Internet. Debian's dedication to Free Software, its non-profit nature,
and its open development model make it unique among GNU/Linux
distributions.

The Debian project's key strengths are its volunteer base, its dedication
to the Debian Social Contract, and its commitment to provide the best
operating system possible.


References

Dzongkha Localisation Project
http://dzongkha.sourceforge.net/

IDRC, International Development Research Center
http://www.idrc.ca/

http://sourceforge.net/projects/propel/

Here's the sourceforge link: http://sourceforge.net/projects/ie7/

I absolute love KDiff3, which is originally a KDE application. (It works just fine on the Mac as well, though.) It's fast and I really like the way it shows the differece between files or folders. If there really is only one character difference on a line, it will indicate that there is indeed only one character difference instead of showing the usual full-line replacement that the other diff programs I've tried do. You can also compare three files/directories, hence the name KDiff3. Check it out!